[1.13+] Anti Ban Addresses

Post: [1.13+] Anti Ban Addresses

06-03-2014, 07:20 PM #1

Notorious

Caprisuns Is Back

736

Posts

20,411

Reputation

Credits

Member

Nov 2013

NextGenUpdate

(adsbygoogle = window.adsbygoogle || []).push({}); Hello NGU,

Today I share with you the anti ban addresses for 1.13, I also made an IDC Script to update them for all updates above 1.13 !

Here are the addresses for 1.13:

    

0x006FD047

0x006FD04B

0x006FD04F

0x006FC33F

0x006FBF5B

Set them to 00 or just go to the bottom of function and nop it at the branch.

Here is the IDC Script to update the addresses:

    

#include <idc.idc>



static searchBinary(name, binary, offset, length)

{

    auto currentAddress, lastAddress;

                for(currentAddress=0; currentAddress != BADADDR; currentAddress=currentAddress+4)

                        {              

                                        currentAddress = FindBinary(currentAddress, SEARCH_DOWN, binary);

                                        if(currentAddress == BADADDR)

                                        {

                                                        Message("%s not found!\n", name);

                                                        break;

                                        }

                                        currentAddress = currentAddress - offset;

                                        MakeUnknown(currentAddress, length, 0);

                                        MakeCode(currentAddress);

                                        MakeFunction(currentAddress, currentAddress + length);

                                        if(MakeNameEx(currentAddress, name, SN_NOCHECK|SN_NOWARN) != 1)

                                                        MakeNameEx(currentAddress, name, 0);

                                        Message("\t%s offset: 0x%08X\n", name, currentAddress);

                                        break;

                        }

}

                                

static findDemonware()

{

    searchBinary("DemonWare1", "7C 66 A9 2D 40 82 FF F0  30 61 00 70 38 80 00 32", 0x329, 0x1B; 

    searchBinary("Demonware2", "7C 9C A9 2D 40 82 FF F0  2C 03 00 00 40 82 00 24", 0x3F9, 0x1B;

    searchBinary("DemonWare3", "4E 9E 04 21 80 A1 00 B0  2C 05 00 00 90 BB 1F AC", 0x591, 0x1B;

    searchBinary("DemonWare4", "A3 81 00 94 93 DD 00 00  93 9D 00 04 2C 1C 00 00", 0x3F9, 0x1B;

    searchBinary("Demonware5", "57 DB E9 7E 30 D8 00 02  78 A5 D1 46 7B 67 2E A4", 0xFFFFFFFFFFD828E9, 0x1B;   

}



static  main()

{

    Message("Antiban Finder Script by: Notorious\n");

    findDemonware();

    return 0;   

}

Credits:

    

Notorious

Bitwise - IDC Generator 

Godly

The following 12 users say thank you to Notorious for this useful post:

HaX-Stylin, ImAzazel, LaRip8, Luphox, Mango_Knife, Mx444, RouletteBoi, SnaY, Swaqq, TheUnknown21, wajdi9, Laser

06-03-2014, 08:45 PM #11